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Abstract. Let p be a prime and let A = (ai , . . . , ag ) be a sequence of nonzero 
elements in ¥ p . In this paper, we study the set of all 0-1 solutions to the 
equation 

a±xi + ■ ■ ■ + a£X£ = 0. 
We prove that whenever t ^ p, this set actually characterizes A up to a nonzero 
multiplicative constant, which is no longer true for £ < p. The critical case 
t = p is of particular interest. In this context, we prove that whenever I = p 
and A is nonconstant, the above equation has at least p — 1 minimal 0-1 
solutions, thus refining a theorem of Olson. The subcritical case I = p — 1 is 
studied in detail also. Our approach is algebraic in nature and relies on the 
Combinatorial Nullstellensatz as well as on a Vosper type theorem. 



1. Introduction 

The study of the existence and variety of 0-1 solutions to linear equations over 
a finite Abelian group is a central topic in zero-sum combinatorics. Promoted by 
applications in algebraic number theory, many results have been proved in this area 
since the seminal paper of Erdos, Ginzburg and Ziv [5]. The interested reader is 
referred to [3 [8] for an exposition and many references on this subject. 

Let p be a prime and let A — (ai, . . . , at) be a sequence of nonzero elements in 
F p . In this paper, we study the set Sa of all 0-1 solutions to the equation 

(1) a\X\ + ■ • • + a(X£ = 0. 

Equivalently, one has 

s A = A ± n {o, i} e 

where A = {x e F^ : A ■ x — 0} and A ■ x denotes the usual inner product of A 
and x over Fp\ This very definition readily makes of Sa an ambivalent object that 
can be expressed as the intersection of an algebraic structure, namely a hyperplanc 
of F^, and the ^-cube {0, l} 1 , which has a more combinatorial flavor. 

Seen as a set of vectors, S A will be studied through the subspace (Sa) of A . 
For this reason, we will set 

dim(A) =dim({S A ))- 

In particular, since dim(A ± ) = £ — 1, it can easily be noticed that dim(j4) ^ 
I — 1 always holds. Alternatively, every element of evi can be seen as a subset of 
[1,£]. Therefore, it is not surprising that Sa also has set theoretic properties. For 
instance, S A is easily seen to be closed under disjoint union. It is also closed under 
complement if and only if the sum a(A) of all elements in A is equal to zero. In 
what follows, we will be particularly interested in the number of minimal elements 
in 5,4 \ {0} ordered by inclusion. 

In this paper, we address three problems which appear to be closely related. 
First, we determine the value of dim (^4) for any sequence A of £ ^ p — 1 nonzero 
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elements in F p . Then, we apply our results to solve the reconstruction problem 
of knowing whether Sa characterizes A up to a nonzero multiplicative constant. 
Finally, we study the number of minimal elements in Sa- 

The main idea behind our results is the following. For every £ ^ p — 1, the 
equality dim(yl) = £ — 1 holds true except for a very limited number of exceptional 
sequences which can be fully determined. Our first theorem deals with large values 
of £, namely £ > p. 

Theorem 1.1. Let p be a prime and let A = (ax, . . . , at) be a sequence of £ > p 
nonzero elements in ¥„. Then 



Consequently, whenever A is a sequence of £ > p nonzero elements in F p , the 
hyperplane A has a basis consisting solely of elements in Sa, and is thus fully 
characterized by its intersection with the ^-cube. This solves the reconstruction 
problem for large values of I. 

Corollary 1.2. Let p be a prime. Let also A,B be two sequences of £ > p nonzero 
elements in ¥ p . Then Sa = Sb if and only if A and B are colinear. 

Theorem 11.11 also implies a lower bound on the number of minimal elements in 
Sa- Indeed, one can notice that any basis of A consisting of elements in Sa can 
be turned into a basis of A 1 - consisting exclusively of minimal elements in Sa (see 
Proposition 13. 3p . This yields the following result. 

Corollary 1.3. Let p be a prime and let A = (ax, . . . , at) be a sequence of £ > p 
nonzero elements in ¥ p . Then Sa contains at least £ — 1 minimal elements. 

In the case £ = p, there are exceptional sequences A such that dim(A) < £ — 1 . 
However, such exceptions are very rare, since they have to be highly structured. 
The following analogue of Theorem 11.11 is our first result in this direction. 

Theorem 1.4. Let p be a prime and let A = (ax, ■ ■ ■ , a p ) be a sequence of p nonzero 
elements in ¥ p . Then one of the following statements holds, 
(i) dim(^4) = 1 and there exists r £ ¥* such that 

(ax,...,a p ) = (r,...,r). 
(ii) dxm(A) = p — 2 and there exist t £ [l,p — 3], a £ & p . r £¥* such that 
(ffl <r (i),...,o cr (p)) = (r,...,r,-r,...,-r,-(t+ l)r,-(t+ l)r). 



(Hi) dxm(A) = p — 1. 

Therefore, in all cases where dim(A) = p — 1, the same argument as above 
readily implies that A has a basis consisting of elements in Sa- In addition, the 
two exceptional cases (i) and (ii) correspond to highly structured sequences, for 
which we can easily check by hand that Sa characterizes A 1 - indeed. This answers 
the reconstruction problem affirmatively in the case £ — p. 

Corollary 1.5. Let p be a prime. Let also A, B be two sequences of p nonzero 
elements in ¥ p . Then Sa — Sb if and only if A and B are colinear. 

In his last paper [5], Olson proved a conjecture of Erdos stating that if A is a 
nonconstant sequence of p nonzero elements in F p , then Sa contains at least p — 1 
nonzero elements. In this respect, Theorem 11.41 actually yields a strong version of 
the original conjecture of Erdos. More precisely, this conjecture still holds when we 
restrict ourselves to counting minimal elements in 5^4 only. This gives the following 
refinement of Olson's theorem. 



dxm(A) =1-1. 




p-2-t 
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Corollary 1.6. Letp be a prime and let A — (<Zi, . . . , a p ) be a nonconstant sequence 
of p nonzero elements in F p . Then Sa contains at least p — 1 minimal elements. 

In the case I = p — 1, the situation becomes a little more involved but similar 
results can still be proved. On the one hand, all sequences A with cr(A) ^ can 
easily be handled (see Lemma l5TTj) . On the other hand, the following theorem fully 
describes the case of sequences A with a (A) = 0, which will be called zero-sum 
sequences. 

Theorem 1.7. Letp be a prime and let A = (ai, . . . , a p _i) be a zero-sum sequence 
of p — 1 nonzero elements in ¥ p . Then one of the following statements holds. 

ft) dim(A) = 1 and there exist a 6 © p _i, r 6 F* such that 

(a CT (i),...,a CT (p_i)) = (r,...,r,2r). 
(m) dim(^4) = p — 4 and i/iere e:as< ct £ ©p-i, r 6 F* swc/i i/iai 
(a CT (i),...,a CT ( p _i)) = ftv^r, -r,2r,2r,2r). 

p—5 

(Hi) dim(A) = p — 3 and there exist t G [0,p — 6], a G ©p-i, r G F* swc/i i/iai 
(a<r(i))---,Oo-(p-i)) = [r,---,r, -r,. -r , 2r, -ft + 3)r, -ft + 3)r). 

t p~A~t 

(iv) dim(A) = p — 3 and there exist t G [l,p — 4], cr G ©p-i, r G F* such that 
(a (T(1) ,...,a (T( p_i ) ) = (r, . , r, -r, . , -r , -ft + l)r, -ft + 2)r). 

t p-3-t 

(u) p = 7, dim(y4) = p — 3 = 4 and there exists a G ©6 such that 

(flff(i)) • ■ • > a <r(6)) = (-1,1,-2,2,-3,3). 
fti) dimft4) = p - 2. 

It turns out that £ = p actually is the critical case for our reconstruction problem, 
since there are sequences A of p — 1 nonzero elements in F p for which Sa does not 
fully characterize A . However, we can prove there are essentially two families of 
such exceptions. 

Corollary 1.8. Let p be a prime. Let also A, B be two sequences of p — 1 nonzero 
elements in ¥ p . Then Sa = Sb if and only if A and B are either colinear or have 
one of the following forms. 

ft) There exist a G ©p-i, r G F* ; A G F* such that 

(a CT (i),...,a ff (p-i)) = (r,...,r,r,2r) 



(K(i), • • ■ , ba(p-i)) = (Ar, . . . , Ar, 2Ar, Ar). 
(ii) There exist t G [l,p — 4], a G ©p-i, r G F*, A G F* such that 

(a CT (i), ■ • ■ , a<7(p-i)) = ft, ■ • • ' r y \~ r ' ' ' - 1 ~ r : ~^ + 1 ) r ' + 2 ) r ) 

t p-3-t 

and 

. . , = (Ar, . . . , Ar, -Ar, . . . , -Ar, -ft + 2)Ar, -ft + l)Ar). 
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(Hi) p = 7 and there exist a £ ©6; A G F£ such that 

(a CT (i),...,a CT ( 6 )) = (-1,1,-2,2,-3,3) 

and 

(^(i), ■ • • , ft^B)) = (-A, A, 3A, -3A, 2A, -2A). 

As for the number of minimal elements in Sa when i = p— 1, the following result 
easily follows from Theorem 11.71 

Corollary 1.9. Let p be a prime and let A = (ai, . . . , a p _i) be a sequence of p — 1 
nonzero elements in F p . Then Sa contains at least p — 3 minimal elements unless 
A has one of the following forms, 
(i) There exists reF* such that 

(ai, . . . ,a p _i) = (r, . . .,r). 

(ii) There exist a € © p -i and r £ F* such that 

(a<r(i) ! ---,<Mp-i)) = (r, ...,r, 2r). 

The outline of the paper is as follows. In Section [51 we recall some useful tools. 
In Section [31 we introduce the notion of a ratio set, which makes it possible to 
deduce our Theorem 11.11 from the Combinatorial Nullstellensatz. In Section [H we 
prove Theorem 11.41 and its corollaries. Our method is similar in nature to the one 
used in Section [3j except that a Vosper type theorem comes into play. In Section 
[5l this approach is further refined to solve our three problems in the case t = p — 1. 
Finally, in Section [51 we extend our results to the affine setting. 

2. Some tools 

In this section, we present a series of results we will use throughout the paper. 
As already mentioned, our method relies on the Combinatorial Nullstellensatz pQ, 
a useful algebraic tool having a wide range of applications in Combinatorics. 

Theorem 2.1 (Alon pQ). Let F be an arbitrary field, and let P be a polynomial 
in ¥[X\, . . . , Xd\. Suppose that the degree of P is tj and the coefficient of 

Yli—i -X"' * ^ nonzero. Then, for any subsets Si,...,Sd of ¥ with \Si\ > ti, there 
exists (si, . . . , Sd) 6 Si x • x Sj such that 

P( Sl ,...,s d )^0. 

In Additive Combinatorics, this theorem provides a unified way to estimate the 
cardinality of all kinds of sumsets in F p . These objects often are restrictions of the 
Minkowski sum 

A + B = {a + b: a G A,b E B] 
of two nonempty subsets A and B of F p . A collection of such estimates can be found 
in [TU1 Chapter 9]. For instance, a first corollary of Theorem 12. II is the well-known 
Cauchy-Davenport Theorem. 

Theorem 2.2 (Cauchy-Davenport [3j[l[5]). Let p be a prime and let A, B be two 

nonempty subsets o/F p . Then 

\A + B\ >mm{p,\A\ + \B\ -1}. 

Let us mention that equality in Cauchy-Davenport Theorem only holds for highly 
structured sets, which are characterized by Vosper's Theorem [TT1[T2]. To be more 
precise, the essential part of Vosper's Theorem states that whenever |j4|, \B\ ^ 2, 
the relation 

\A + B\ = \A\ + \B\-l<p-l 
holds if and only if A and B are arithmetic progressions with the same difference. 
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Another central object of interest in Additive Combinatorics is the set of subsums 

l 

S(A) = 

i=l 

of a sequence A = (a\, . . . , ai) over F p . Thanks to the properties of some binomial 
determinants, a sharp lower bound for the cardinality of the set of subsums could 
recently be deduced from the Combinatorial Nullstellensatz Theorem 8]. To 
state this result, we require the following definition. For any element a £ F*, the 
total number of appearances of a and —a in the sequence A will be called the 
multiplicity of the pair {a, —a} in A. 

Theorem 2.3. Let p be a prime and let A = (ai, . . . , ai) be a sequence of I ^ 1 
nonzero elements in F p . Let also t\ £2 ^ ■ ■ ■ ^ £k denote the multiplicities of the 
pairs {a, —a} in A. Then 

|E(A)| > min |p, 1 + 53 

In this paper, we will also need structural information on sequences whose set of 
subsums is relatively small. For this purpose, the following two Vosper type results 
can easily be obtained from Theorem 12.31 

Lemma 2.4. Let p be a prime and let A = (ai,...,ai) be a sequence of I ^ 1 
nonzero elements in ¥ p such that 

\E(A)\ =£ + Kp. 

Then there exists r£F* such that a,; £ for all i £ [1,1]- 

Proof. Denoting by £1 £2 ^ •■• ^ £k the multiplicities of the pairs {a, —a} in A, 
we readily obtain 1% = L Since £ + 1 < p, Theorem 12.31 yields 

k 

»=i 

so that 53<=i(* ~ = 0- Then £1 = £, which is the desired result. □ 

Going one step further, we can also prove the following lemma. 

Lemma 2.5. Let p be a prime and let A — (ai, . . . , ai) be a sequence of £ 2 
nonzero elements in ¥ p such that 

\E(A)\ = £ + 2<p. 
Then one of the following two statements holds. 

(i) There exist r £ F* and iq £ [1,£] such that ai £ {±2r} and ai £ {±r} for 

all i iq. 
(ii) One has £ = 2. 

Proof. Denoting by l\ £2 *s • • • 5^ £k the multiplicities of the pairs {a, —a} in A, 
we readily obtain Yli=i ^» = ^- Since £ + 2 < p, Theorem 12.31 gives 

k 

l + ^Ti£ l ^£ + 2, 
i=i 

so that £* =1 (i-l)4 < L Then either = £ or (£i,£ 2 ) = (£-M). If h = £, then 
there exists r £ F* such that £ {±r} for all i £ [1, £}, which implies = £+1, 

a contradiction. Now, suppose that (£1, £2) = (£ — 1, 1) and £ > 2. Then there exist 
r £ F* and io £ [1, £] such that a 2 ; £ {±r} for all i 7^ io- It follows that S(A \ (<ii )) 
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and di + ~E(A \ (aj )) both are arithmetic progressions of length £ > 2 with same 
difference r. Thus, for the equality |E(A)| = |{0, a io } + Y,(A \ (a io ))\ = t + 2 to 
hold, we must have <ij £ {±2r}. □ 

3. Ratio sets and long sequences 

Let p be a prime and let A be a sequence of I ^ 1 nonzero elements in F p . In this 
section, we describe first our general approach to proving dim(yl) = I — 1. Then, 
we prove Theorem ll.il and its corollaries. 

3.1. Ratio sets. Let p be a prime. Let also A — (oi, . . . , a^) and i? = (pi, . .. ,bi) 
be two sequences of I ^ 1 elements in F p such that the elements of A are nonzero. 
For every A £ F p , we consider the set 

h = {ie[l,£]:b i /a i = X}. 

Any element A G ¥ p such that I\ ^ will be called a ratio associated to (A, B). 
Now, let Ai, . . . , Ad be the pairwise distinct ratios associated to (A, B). For every 
i G [l,d], we define the subsequence 

Si = (a,j : j e I\ t ). 

In particular, one has 

d 

Finally, for every i G [1, d], we introduce the ratio set 

E 4 = E(5i). 

It follows from Cauchy-Davcnport Theorem that 

(2) |£<| >mm{p,\Si\ + l}. 

In this paper, our main argument to prove that dim(A) = £—1 is as follows. First, 
note that such an equality holds if and only if for every sequence B of £ elements 
in F p such that Sa C Sb, A and B are colinear, that is, d = 1. In order to prove 
that d = 1, properties of the ratio sets E^ will be deduced from the Combinatorial 
Nullstellensatz. Before stating our first result in this direction, we observe that the 
ratio sets E^ associated to (A, B) readily have the following interesting feature. 

Lemma 3.1. Let p be a prime. Let A, B be two sequences of i ^ 1 elements in ¥ p 
such that the elements of A are nonzero and Sa C Sb- Let also Xi, . . . ,Xd be the 
ratios associated to (A,B). Then E^ n (— Ej) = {0} for any two distinct elements 

i,j G [1,4 

Proof. By definition, we readily have G Ej for all i G [l,d]. Now, assume there is 
an element s G Ej D (— Ej) such that s ^ 0. By definition of Ej and Ej, there exist 
Ji C I\ z and Jj G I\ j such that J2keJi a k = s = - J2keJj a k- Since Sa C Sb, then 

+ «fc = o 

yields 

& fc + £ & fc = 

which is equivalent to 

^ AiOfc + AjOfc = 

so that 

(Aj - Aj)s = 0, 
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which is a contradiction. 



□ 



On the one hand, an immediate corollary of Lemma 13. II is that whenever d 2, 
one has |£j| < p and |£j| ^ \Si\ + 1 for all i 6 so that 



(3) 



;.=i 



On the other hand, the ratio sets also have the following general property, which 
will be useful throughout the paper. 

Theorem 3.2. Let p be a prime. Let A,B be two sequences of I 1 elements in 
F p such that the elements of A are nonzero and Sa C Sb- Let also Ai, . . . , Ad &e 
t/ie ratios associated to (A,B). Ifd^2, then 



In addition, 5Z i=1 (|£i| — 1) = p implies ( | — 1) = m F p . 

Proof. Let Ai, . . . , A<f be the ratios associated to (A, £?) and assume d 2. We shall 
consider the polynomial 



p-i 



which has degree p. Since Sa C Sb, P is easily seen to vanish on Y\ i=1 £j. In 



addition, the monomials of degree p in P are the same as those of 
/ d \ / d \ / d \ ^ 

E* = E A ^ 



Ai^ 



E 



(p-i)i 



(ti,....td) 

\Eti'i=p-i 



=X>*f+ E ^(E^)ri 



max{ti }<p 

Assume X)i=i(Pi| — 1) > P- Then there exists C*i)ie[i,d] suc h that J2i=i = P) 
where ^ ij ^ | £ j | — 1 for alH £ [1, rf] , and two distinct elements io , jo G [1, d] such 
that £ io > and t io < |£ io | - 1. We define (t-) ie[M ] by t' io = t io - 1, t' jo = t jo + 1 
and t\ = U otherwise. 

Now, suppose that the coefficients of n»=i ^t* an< ^ Yli=i -^i* m -P both vanish. 
Then, both sums 53<=i ^*^» ano - Si=i are zero i so that 



^A^-^A^ = A 



0, 



i=l 



which is a contradiction. Thus, one of these coefficients is nonzero, and by Theorem 
12.11 P cannot vanish on J\i=i a contradiction too. It follows that 



£(|Ei|-l)<p. 
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In addition, if one has — -0 = P> then since P vanishes on Si, 

Theorem 12 . II implies that the coefficient of Yif—i 1 in P is zero, that is to say 

Eti^(|S l |-l) = OinF p . □ 

3.2. The case of long sequences. Thanks to Theorem 13.21 it is now easy to 
deduce our first theorem and its corollaries. 

Proof of Theorem \l.l\ Let A be a sequence of I > p nonzero elements in F p . For 
any given sequence B of £ > p elements in F p such that Sa C Sb, let Ai, . . . , A<j be 
the ratios associated to (A, B) and assume d ^ 2. On the one hand, the inequality 
© implies that — 1) ^ > P- On the other hand, it follows from Theorem 

13.21 that X^=i(l^il — 1) ^ Pi which is a contradiction. Therefore d = 1, and the 
desired result is proved. □ 

Corollary II .21 now is a straightforward consequence of Theorem ll.il In addition, 
one can easily notice that Corollary 11.31 follows directly from Theorem 11.11 and the 
following general proposition. 

Proposition 3.3. Let p be a prime and let A be a sequence of £ ^ 1 nonzero 
elements in ¥ p such that dim(A) = £—1. Then there exists a basis of A 1 - consisting 
of minimal elements of Sa ■ 

Proof. Let (ei , . . . , e£ _i) be a basis of A 1 - consisting of elements in Sa- Let F be the 
set of all minimal elements in Sa that are contained in at least one e^. Now, since 
each ei is a disjoint union of minimal elements in Sa, we obtain (Sa) C (F) C A . 
Since dim(A) = £ — 1, it follows that (F) = A and F contains a basis of A- 1 . □ 

4. Sequences of length p 

Let p be a prime and let £ ^ p. In this section, we introduce a special class of 
sequences A of £ nonzero elements in F p for which dim(yl) < £ — 1 readily holds. 
In the case I — p, we determine all sequences in this class. We then refine the 
approach of Section [3] to prove that dim(A) = p — 1 for all remaining sequences. 

4.1. Exceptional and regular sequences. Let A be a sequence of i ^ p nonzero 
elements in F p . Then, A will be called exceptional whenever there exist two distinct 
elements i,j £ [1,£] such that for all x G Sa, one has 

|{i,j>nar| € {0,2}. 

Any sequence which is not exceptional will be called regular. In others terms, A is 
a regular sequence if and only if for any two distinct elements i, j G [i-,£], there is 
x G iS,4 such that i£i and j ^ x. 

On the one hand, regular sequences have the following useful property. 

Lemma 4.1. Let p be a prime. Let A be a regular sequence of I elements in F p; 
and B be a sequence of £ elements in ¥ p such that Sa C Sb- Then 

G [1,£], (ai = a,) =*> (fej = bj). 

Proof. Let z, j be two distinct elements of [1, £) such that ai = aj. Since A is regular, 
there exists x G Sa such that igi and j x. Therefore, x' = (x \ {i}) U {j} G <Sa- 
By assumption, it follows that x, x' G Sb and £> • x — B ■ x' = bi — bj = 0, which is 
the desired result. □ 

On the other hand, one can notice that dim(A) < £ — 1 readily holds whenever 
A is exceptional. However, it turns out that for large values of £, exceptional 
sequences are highly structured and can easily be determined. For instance, the 
following lemma fully characterizes all exceptional sequences in the case £ = p. 
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Proposition 4.2. Let p be a prime and let A = (ai, . . . , a p ) be an exceptional 
sequence. Then one of the following statements holds. 

(i) dim(A) = 1 and there exists r E F* such that 

(a 1 ,...,a p ) = (r,...,r). 
(ii) dim(A) = p — 2 and there exist t G [l,p — 3], a G & p , r G F* such that 
(a (T(1) ,...,a (T(p) ) = (r,. r, -r,. -r ,-(t+ l)r,-(t+ l)r). 

Proof. Since ^4 is exceptional, there exist two distinct elements i,j G such that 
for all x G iSa, one has \{i, j} fix G {0,2}. Now, let A' be the sequence obtained 
from A by deleting and dj . Then, Cauchy-Davenport Theorem gives 

\Ti(A')\ > min{p, (p - 2) + 1} = p - 1. 

By assumption, one has — a, ^ S(yl') and — <ij ^ E(A'), so that = p — 1 

and = a 3 . Thus, by Lemma [2.4[ there exists r G F* such that at G {±r} for 
all fc {i, j}. If a?j = r for all fc ^ then one has — = (p — l)r, which 

gives = aj — r. Therefore, A is of the form given in (i), and it can easily be 
checked that dim(A) = p — 1. Note that the same conclusion holds if afc = — r for 
all k £ {i, j}. Otherwise, there is t G [l,p — 3] such that A' consists of t copies of 
r and p — 2 — t copies of — r. In this case, we obtain ai = dj = — (t + l)r, so that, 
by relabelling if necessary, A is of the form given in (ii). The following table then 
gives a basis of (5a)- 

t p-2-t 





r 


r 


— ?* . . . — r 


-(t + l)r -{t + l)r 


r 


1 




1 (0) 




p-2-U 






(0) 






" 




1 




1 


(0) (0) 








(0) i 






(0) 


1 


1 






1 


... 1 


1 ... 1 


1 1 



□ 

4.2. A second property of ratio sets. Before proving Theorem 11.41 we need 
the following general result on ratio sets, which will not only be useful in the case 
i = p, but in subsequent sections also. 

Proposition 4.3. Let p be a prime. Let A,B be two sequences of £ ^ 1 elements 
in F p such that the elements of A are nonzero and Sa C Sb- Let also Ai, . . . , Ad be 
the ratios associated to (A,B) and assume d^2. Given any two distinct elements 
*o,jo S [l,d] andr io G S lQ , define 

X' i0 = Z(S l0 \ (r i0 )), % = E(5 jG U (r, )) = S io + {0,r lo } 

and = Sj otherwise. Then the polynomial 

(d \ / d \ / / a \ p- 1 




where \ = (Aj — Aj )r£ o; vanishes on Yli—i ^ 
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In addition, the coefficient of a monomial J\i—i Xj* ^ n Qio,jo w ^ Si=i U = -P+ 1 
and max{ti} < p is 



(P-1)! 

n?=i*ii 



!>*< - E A ^ 



vi=l 



v.»=l 



Proof. Since 5a C 5b, the polynomial 



- 1 



vanishes on n»=i ^» anc l divides Qi ,j - Therefore, Qi ,j vanishes on n»=i 

Now, for any (^); e[M] G (iliLi S i) \ (lIiLi s i)i let us consider (a;i) ie[ i )(i ] 
defined by x io = x' io + r io , Xj = x[ Jo — r io and Xi — x\ otherwise, which is an 
element of J\i=i Note that ^2i=i x 'i = Hi=i x i- ^ n addition, since Sa C Sb, 
the equality ^ i=1 x i — implies J2i=i ^i x i = 0' so that 

d d 

A^x^ =Xi (xi B — ri ) + Xj (xj + r^) + XiXi 

i=l i=l 

d 

i=l 

=(Aj - A io )r io , 

which proves that Qi j vanishes on n»=i Finally, Q» ,jo clearly has degree 
p+1 and the monomials of degree p + 1 in Q, J0 are the same as those of 



f d \ 2 / d \ P 1 

E« E*< 

Vi=l / \»=1 / 



E A ?^ 2 + 2 E AjAjJQXj 



(p-1)! 



VE?=i*i=p-i 



= x: a^ +1 + E E(- A ? + 2W * 



i=i j=i 



Ef=i*i=p+i 

max{tj}<p 
d d d 



1 l^i<i^d 



i=l 



i=l j=l 



(tl,...,t«0 lli=l r »- 

max{ii}<p 



eh - e^ n^- 



,i=l 



i=l 
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□ 

4.3. Proof of Theorem 11.41 We can now prove the main result of this section 
and its corollaries. 

Proof of Theorem \l-4\ Let A be a sequence of p nonzero elements in F p not being 
of the forms given in (i) or (ii). Thanks to Proposition ^. 21 we can assume that A 
is regular. For any given sequence B of p elements in F p such that Sa C Sb, let 
Ai, . . . , Xd be the ratios associated to (A, B) and assume d ^ 2. On the one hand, 
([3]) implies that X) i=1 (|Ej| — 1) ^ P- On the other hand, it follows from Theorem 
EJthat Ei=i(l E i| - 1) <P, whi ch yields 
d d 
5^(|Ei|-l)=jj and ^A i (|S i |-l) = 0inF p . 

i=l i=l 

Suppose that d = 2. Since |Ei + E2I ^ p + 2, we obtain |Ei n (— S2) | 2, which 
would contradict Lemma 13.11 From now on, we thus assume d J? 3. Since ^4 is 
regular, Lemmas 13.11 and 14.11 give |E^| < p — 1 for all i G [1, d]. It follows that 
|Ej| = + 1 for all j G [l,d], and Lemma [2.41 implies that there exists r; G F* 
such that all elements of Si are equal to r, or — r%. 

For any two distinct elements iojio S [1, d] and any ri G Si , let us consider the 
sets E ■ defined by 

E^ = E(S, v (r l0 )), S; o = E(5 Jo U (r io )) = E J0 + {0,r lo } 

and E^ = Ej otherwise. Let also Qi j be as in Proposition 14.31 

Since E j is an arithmetic progression with difference ri a , one has | E [ | = [£$„ | — 1. 

In addition, since A is regular, Lemmas 13 . 1 1 and [4.11 imply that r£ ^ ±^ - It follows 

from Lemma [2^1 that |E^| ^ |E io | + 2. 

We now define (U) ie [ ltd ] by i io = |E io | - 2, t, = |E J0 | + 1 and U = |Ei| - 1 

otherwise. In particular, < |E-| — 1 < p for all i G [l,d] and ^ i=1 U = p+ 1. 

Since X)f=i Ai(|Ej| — 1) = in F p , Proposition 14.31 implies that, up to a nonzero 

multiplicative constant, the coefficient of Hi=i -^t* m Qio-jo i s 

(l>*'l - (l>^) =(2A J0 -A l0 ) 2 - ^-A^+^AfdSil-l)^ 

=(2Af - 4A i0 A i0 + 2A 2 ) - ]T A 2 (|E,| - 1) 

i=l 

=2(A io -A io ) 2 -^A 2 (|S i |-l). 

i=l 

Note that E i=1 A| (|Ej| — 1) is independent of z and j - In addition, the coefficient 
of rii=i X\ l m Qio,jo i s zer0 ^ and only if 

(A JO -A io ) 2 = i^A?(|E i |-l). 

t=i 

Since d ^ 3, there is at least one pair (}o,jo) such that this equality does not 
hold. It follows from Theorem 12 . II that for this actual pair, Qi j cannot vanish on 
Yli—i EJ, which contradicts Proposition 14.31 □ 
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Proof of Corollary 1 1.51 Let A,B be two sequences of p nonzero elements in ¥ p . 
One direction of the implication is trivial. Thus, we shall prove that A and B are 
colincar whenever Sa = Sb- By Theorem ll.4l there are three cases to consider. If 
dim(v4) = p — 1, then Sa C Sb already implies the required result. If A is constant, 
it is also easily seen that Sa = Sb holds if and only if B is constant. Otherwise, 
A and B both are of the form given in Theorem ll.4l (ii). In particular, there exist 
t G [l,p — 3] and r G ¥* such that, by relabelling if necessary, one has 

A = (r,. r, r r,. -r , -(t + l)r, -(< + l)r). 

t p-2-t 

Since 5^ C 5s, we deduce that 

B = (Ar, . . . , Xr, -Xr,. . .,-Xr , -(* + l)Xr + d, -(t + l)Xr - d), 

t p-2-i 

for some A G F* and d £ F p . Thus, fl is of the form given in Theorem 11.41 (ii) if 
and only if d — 0, which completes the proof. □ 

Proof of Corollary \1.6\ Let A be a nonconstant sequence of p nonzero elements in 
F p . By Theorem ll.4l there are two cases to consider. If dim(A) = p—1, the required 
result directly follows from Proposition ^. 31 Otherwise, there exist t G — 3] and 
r G F* such that A consists of t copies of r, p — 2 — t copies of — r and two copies 
of — (t + l)r. Denoting the minimum and maximum of t and p — 2 — t by m and M 
respectively, it is easily seen that the number of minimal elements in Sa is 

mM + 

Now, if t G [2,p — 4], then p ^ 7 and 5,4 contains at least 2(p — 4) ^ p—1 minimal 
elements. If t G {1, p — 3}, then p 5 and 5^ contains exactly 2(p — 3) > p — 1 
minimal elements, which completes the proof. □ 

5. Sequences of length p — 1 

Let p be prime and let A be a sequence of p — 1 nonzero elements in F p . In 
this section, we start by showing that the dimension and structure of A can easily 
be deduced from Theorem 11.41 whenever a (A) ^ 0. Then, we concentrate on the 
case where a(A) = and prove Theorem 11.71 as follows. On the one hand, we 
determine all exceptional zero-sum sequences. On the other hand, we further refine 
our general approach to handle the case of regular zero-sum sequences. 

5.1. The case of nonzero-sum sequences. Given a sequence A = (a±, . . . ,ae) 
of i ^ 1 nonzero elements in ¥ p such that <r(A) ^ 0, we consider the sequence 
A' = (oi, . . . , ai , —a (A)). The aim of the following lemma is to show that the value 
of dim(A) can easily be derived from d\m(A'). 

Lemma 5.1. Let p be a prime and let A be a sequence of £ 1 nonzero elements 
in F p such that o~(A) ^ 0. Then A' is a zero-sum sequence and 

dim(A') = dim(A) + 1. 

Proof. Let us set X = {{x\, . . . ,xe+i) G Sa> ■ = 0}. We clearly have cr(A') = 
0, which implies that Sa' is closed under complement. Therefore, 

(S A ,)={XU{(1,...,1)}}. 

In addition, it follows from the very definition of X that (1, . . . , 1) G Sa' \ (X) and 
dim(X) = dim(A). Thus, 

dim(A') = dim((5A')) = dimpf) + 1 = dim(A) + 1, 




A NULLSTELLENSATZ FOR SEQUENCES OVER F p 



13 



which completes the proof. □ 

In particular, Lemma 15.11 implies that for every sequence A of p — 1 nonzero 
elements in F p such that a (A) ^ 0, then either dim(A) = p — 2, or dim(A) = and 
A is constant, or dim(A) = p — 3 and A can be obtained by deleting any element 
in a sequence of type (ii) in Theorem 1 1.41 

The reconstruction problems on A and A' are also closely related to each other. 

Lemma 5.2. Let p be a prime and let A, B be two sequences of £ 1 nonzero 
elements in ¥ p such that o~(A) ^ 0. Then Sa' = Sb' if and only if Sa = Sb- 

Proof. Since cr(A') = 0, the desired result is a straightforward consequence of the 
fact that Sa< is closed under complement. □ 

For instance, let A, B be two sequences of p — 1 nonzero elements in ¥ p such 
that cr(A) ^ and Sa — Sb- Specifying I = p — 1 in Lemma T5.21 we obtain that 
Sa' = Sb>- Then, it easily follows from Corollary 11.51 that A' and B' are colinear, 
and so are A and B. From now on, we thus consider zero-sum sequences only. 

5.2. The case of exceptional zero-sum sequences. We now state and prove 
the following lemma, which fully characterizes all exceptional zero-sum sequences 
in the case £ = p — 1 . 

Proposition 5.3. Let p be a prime and let A = (aj., . . . ,a p -i) be an exceptional 
zero-sum sequence. Then one of the following statements holds, 
(i) dim(^4) = 1 and there exist a G & p -i, r£F* such that 

(a CT(1) , . . .,a^ p _^) = (r,.. . ,r,2r). 

(ii) dhn(A) = p — 4 and there exist a G & P -i, r G F* such that 

(a CT (i), • ■ ■,a a(p _ 1) ) = (tv^t, -r,2r,2r,2r). 

p— 5 

(Hi) dim(A) = p — 3 and there exist t £ [0,p — 6], a G & p -i, r G F* such that 
(a«r(i), ■ • ■ , a CT ( P -i)) = ([, - ,r, -r,. ,-r , 2r, -(< + 3)r, -(t + 3)r). 

t p-4-t 

(iv) dim(A) = p — 3 and i/iere eaxsi t £ [l,p — 4], cr G ©p-i, r G F* suc/i i/iai 
(a CT(1) ,...,a (T( p_ 1) ) = (r, . , r, -r, . , -r , -(t + l)r, -ft + 2)r). 

t p-3-t 

Proof. Since A is exceptional, there exist two distinct elements i,j G 1] such 

that for all x € 5a, one has H x| £ {0,2}. Now, let A' be the sequence 

obtained from A by deleting aj and aj. Then, Cauchy-Davenport Theorem gives 

|E(A')| ^mm{p,(p-3) + 1} =p-2. 

By assumption, one has — a, S(A') and — Oj ^ E(A'). We now consider two cases. 

• \^(A')\ = p- 2. Then, by Lemma [2^41 there exist t € [0,p-3] and r G F* such 
that ^4' consists of t copies of r and p — 3 — t copies of — r. Therefore, we obtain that 
{a,i,aj} = {-(t + l)r, -(i + 2)r}. If a, = a jt then aj+a 3 G {-2(t+l)r, -2(t + 2)r}. 
Since cr(A') = (2t + 3)r, we would have cr(j4) ^ 0, which is a contradiction. Thus, 
one has a« 7^ aj and, by relabelling if necessary, it follows that either t G {0,p — 3} 
and ^4 is of the form given in (i), or t G [l,f>— 4] and ^4 is of the form given in (iv). 

• =p — 1. Then, <Zj = Oj and by Lemma [2~51 there exist t G [0,p — 4] and 
r G F* such that A' consists of t copies of r, p — 4 — t copies of — r and one copy 
of 2r. If t = p — 4, then E(A') = F p \ {— r} and dj = aj = r, so that A is of the 
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form given in (i). If t = p — 5, then T,(A') = F p \ {— 2r}, a% = <Zj = 2r and A is of 
the form given in (ii). Otherwise, one has t G [0,p — 6], = F p \ {(t + 3)r}, 

aj = a,j = — (t + 3)r, and A is of the form given in (in). 

The following tables give a basis of (Sa) for cases (ii) to (w). 
(ii) dim(A) = p — 4. 

p— 5 



p - 5< 



r 


r 


— r 


2r 


2r 2r 


1 


(0) 


1 






(0) 


1 


1 




(0) 


1 . 


1 


1 


1 


1 1 



(Hi) dim(A) = p — 3 and t € [l,p — 6]. 

i p-4-t 



p-A-t 



r 


r 


— r 




— r 


2r 


-(t + 3)r -(t + 3)r 


1 




1 




(0) 






1 


(0) 






1 


(0) 


(0) (0) 


(0) 


1 




(0) 


1 






(0) 


1 


(0) 


1 


1 





1 


... 1 


1 




1 


1 


1 1 



And whenever t = 0, 



p— 4 



p - 5< 



— r 


— r 


— r 


2r 


-3r 


-3r 


1 


1 


(0) 


1 






1 


(0) 


1 


1 


(0) 


(0) 





1 (0) 


1 


1 








1 


1 ... 


1 


1 


1 


1 



(iv) dim(A) = p - 3 and t 6 [l,p - 4]. 

t p-3-t 





r 


r 


— r . . . —r 


-(t + l)r -(t + 2)r 


f 


1 




1 (0) 




p-3-t< 






(0) 










1 




1 


(0) (0) 








(0) i 






(0) 


1 


1 






1 


... 1 


1 ... 1 


1 1 



□ 

5.3. Preliminary results. In the proof of Theorem 1 1.71 we will need the following 
two lemmas to deal with the cases where the number of distinct ratios is small. The 
first one gives some nonvanishing properties of a particular quadratic polynomial. 
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Lemma 5.4. Let p ^ 5 be a prime. Given u,v G ¥ p , let f be the quadratic 
polynomial 

f(x, y) = 2x 2 — 6xy + 6y 2 + 2u(3y — x) + v. 

Then, for any three pairwise distinct elements 01,02,03 G F p , there exists a G ©3 
such that one of the following holds. 

00 /(a CT (i),0!<T(2))/(a<r(i),a<7(3)) ^ 0, 

(m) /(a CT (2),a (T (i))/(a <7 (3),a CT (i)) ^ 0, 

(Hi) /(a CT (i),a CT( 2))/(a CT (2),a CT (i)) ^ 0, 

(iu) /(a (J (i),a (T( 2))/(a (J (2),a <T (3))/(a ( T(3), Q! <T(i)) 7^0. 

Proof. It is an easy exercise to show that, up to a nonzero multiplicative con- 
stant, the only quadratic polynomial vanishing on the six points (oi, 02), (02, 01), 
(ai,a 3 ), (03,01), (02,03) and (03,02) is 

.t 2 + y 2 + xy - (x + y){a 1 + o 2 + o 3 ) + (oio 2 + 01O3 + a 2 a 3 ). 

Thus, there exist two distinct elements i,j G {1,2,3} such that /(aj,Oj) 7^ 0. 
Now, let k be the remaining element of {1,2,3} and assume that for all a G S3, 
none of the properties (i) to (iv) holds. Then one has /(oj,Oj) = 0, /(o,,Ofc) = 
and /(ofc, Oj) = 0, In addition, since /(oj, Oj) /(oj, Ofc) /(o^, o^ = 0, we have that 
either /(oj,Ofc) = or /(ofc,Oi) = 0. Therefore, there exists ct G 63 such that 

/ ("(7(1)) "(7(2)) = /(«<7(2),a<7(l)) = /(«(7(l),«a(3)) = /("(7(3))Q!(7(2)) = 0. 

Without loss of generality, we may assume that is the identity, so that 
/(oi,o 2 ) - .f(o 2 ,oi) = ^=^> -4(oi - o 2 )(oi + o 2 + 2u) = 
/(oi,o 2 ) - /(oi,o 3 ) = 6(o 2 - o 3 )(-oi +o 2 +03 + u) = 
/(01, o 2 ) - /(o 3 , o 2 ) = ^=^> 2(oi - o 3 )(oi - 3o 2 + o 3 - u) = 0. 

Since 01,02,03 are pairwise distinct, they are solution of the linear system 

oi + o 2 = —2m 

— Oi + o 2 + o 3 = — u 
Oi — 3o2 +03 = u. 

Since p ^ 5, the determinant of this system is 6 7^ in ¥ p . Therefore, this system 
has a unique solution, which is easily seen to be oi = o 2 = o 3 = — u. This 
contradicts the fact that oi, 02, o 3 are pairwise distinct, and the proof is complete. 

□ 

Our second lemma gives the structure of a pair of arithmetic progressions cov- 
ering almost all F p , but intersecting in only one element. 

Lemma 5.5. Let p be a prime. Let also Pi and P2 be two arithmetic progressions 
in F p with distinct differences, such that min{|Pi|, IP2I} ^ 3 and Pi n P2 = {0}. 

• // I Pi I + IP2I = P, then there exists r G F* such that Pi and P 2 have one of the 
following forms. 

(1) {0,2,4}.r ond{5,6,...,p-l,0,l}.r, 

(2) {-£^,0,2^i}. r and{-^,-^,...,^,^}.r. 

• // I Pi I + IP2I = p — 1, then there exists r G F* such that Pi and P 2 have one 
of the following forms. 

(3) {0, 2, 4}.r and {5, 6, ... ,p - 1, 0}.r, 

(4) {0, 2, 4}.r and {6, 7, . . . ,p - 1, 0, l}.r, 

(5) {0, 2, 4, 6}.r a«d {7, 8, ... ,p - 1, 0, l}.r, 

(6) {0, 3, 6}.r and {7, 8, ... , 0, 1, 2}.r, 

(7) {-2^1, 0, ^{.r and -^1, . . . , ^, £^}. r; 
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(8) {-2=1, 0, ^}.r and {-2=1 . . . , 2=5, H^}.r ; 

(9) {-2=5, 0, 2^}.r and {-2=5, -2=1, . . . , E=Z, 2^}.r, 

(10) p = 11 and 

(a) {-6,-3,0,3,6}.r and {-2, -1,0, 1, 2}.r, 

(b) {-4, 0, 4, 8}.r and {-2, -1, 0, 1, 2, 3}.r ; 

(c) {-8, -4, 0, 4, 8}.r and {-2, -1, 0, 1, 2}.r ; 

(11) p= 13 and {-8,-4,0,4,8}.r and {-3, -2, -1, 0, 1, 2, 3}.r. 

Proof. Without loss of generality, we can suppose that |Pi| > \P2\. Since |Pi| + 
-P2I S^p — 1, one has |Pi ^ (p — l)/2. Up to a nonzero multiplicative constant, we 
can also assume that Pi has difference 1. Now, we set 

P 2 = {-/?d, • • • , —d, 0, d, . . . , ad}, 

where a and /3 are two nonnegative integers. Note that replacing (d, a, f$) by 
(— d, P,a) yields the same arithmetic progression, so we may assume that d G 
[2, (p — l)/2]. In addition, Pi and P2 satisfy the hypothesis of the lemma if and 
only if —Pi and — P 2 do so, which allows us to suppose that d 6 P 2 , that is a > 1. 
Since Pi fl P 2 = {0}, we obtain that 

Pi = {p-(|P|-(t + i)),...,p- i,o,i,...,t}, 

where ^ t < d. 

We consider first the case where (3 — 0. Then, P 2 = {0, d, . . . , ad} and a ^ 2. 
Also, there exists a unique pair of integers (g, u) such that 

p- (|Pi| - (i + 1)) = qd + u and 1 ^ u < d. 

Since Pi (~1P 2 = {0}, we have qd + u ^ ad + 1. Now, counting separately the missing 
elements of Pi U P 2 in the three intervals [0, d], [d + 1, ad — 1] and [ad,p — 1], we 
obtain that 

|F p \ (Pi U P 2 )| = ((d - 1) - t) + (a - l)(d - 1) + ((gd + u) - (ad + 1)). 
Since a, d ^ 2, one has (a — l)(d — 1) ^ 1. We now distinguish two cases. 

• In the case |Pi | + |P 2 1 = p, one has Pi U P 2 1 = p — 1, so that a = d = g = 2 
and u = t = 1. This is the structure of case (1) in the statement of the 
lemma. 

• In the case |Pi | + |P 2 1 = p — 1, one has Pi U P 2 = p — 2, so that (gd + u) — 
{ad +1)^1, which implies a = q. 

— If g = 2 and d = 2, one has either u = 1 and t = 0, this is case (3), or 
u = 2 and t = 1, this is case (4). 

— If g = 3 and d = 2, one has u = 1 and t — 1, this is case (5). 

— If g = 2 and d = 3, one has u = 1 and t = 2, this is case (6). 
We now turn to the case where /? ^ 1. Since Pi C [— d + 1, d — 1], one has 

^ < |PK2d-l. 

• If |P 2 | = 3, then either |Pi | = p — 3 and d = (p — l)/2, which is case (2), or 
|Pi| =p - 4 and d e {(p- 3)/2, (p - l)/2}, which yields cases (7), (8), (9). 

• If |P 2 | > 4, then a ^ 2 or f3 > 2. Therefore, one of the two intervals 
[d + 1, 2d — 1] and [—2d + 1, — d — 1] has to be disjoint from Pi. Such an 
interval can contain at most one element of P 2 , and thus contains at least 
d — 2 elements being neither in Pi nor in P 2 . Since |Pi| + |P 2 | ^ p — 1 and 
I Pi H P 2 | = 1, one has |Pi U P 2 | > p - 2 and then d - 2 < 2. 

— If d = 2, then 4 ^ |P 2 | < |Pi| < 3, a contradiction. 

— If d = 3, thcnp s: 11 and 4 < |P 2 | < |Pi| 5. Since |Pi| + |P 2 | ^ 8, it 
follows that p = 11 and |Pi| = |P 2 | = 5, which gives (10. a). 
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- If d = 4, then p < 15 and 4 s$ \P 2 \ < |Pi| < 7. Since |P X | + \P 2 \ > 8, 
it follows that either p = 11 and (10. b) or (10. c) holds, or p — 13 and 
(11) holds. 

□ 

5.4. Proof of Theorem 11.71 We can now prove the last of our main theorems. 

Proof of Theorem ] 1.7\ Let A = (a%, . . . , a p -i) be a zero-sum sequence of p — 1 
nonzero elements in F p not being of the forms given in (i) to (iv). Thanks to 
Proposition 15.31 we can assume that A is regular. For any given sequence B of 
p — 1 elements in F p such that Sa C <Sb, let Ai, . . . , Ad be the ratios associated 
to (A, B) and assume d 2. On the one hand, the inequality (J3J implies that 
$Zf = i(|£j| — 1) ^ P — 1- On the other hand, it follows from Theorem 13.21 that 
Ei=i(l s i| - !) < P, which yields 

d 

£(|S i |-l)G{p-l,p}. 

i=l 

Case 1: d = 2. 

By Lemma [3.11 one has ^ (Si s {0}) + E2 and Cauchy-Davenport Theorem 
implies that 

|(Ei \ {0}) + E 2 | > (|Ei| - 1) + (|E 2 | - 1) > \S X \ + |S 2 | = p- 1. 

Therefore, one has |E,| = \Si\ + 1 for each i G {1,2}. Since |Ej| < p by Lemma [37X1 
it follows from Lemma 12.41 that there exists G F* such that all elements of Si are 
equal to n or — r,. In addition, since A is a zero-sum sequence, Lemma 13.11 yields 
c(iSi) = 17(52) = 0, so that fj occurs as many times as — r, in S^. 

Now, for each i G {1,2}, consider the subsequence S^ of Sj which contains only 
the occurrences of r*, and set E^ = E(S'|). We clearly have that 

l^l+l^ 2 | = ^ and |Ei| + |^| = ^p. 

Suppose that there exist (xi,yi) G (E^) 2 and (22,2/2) G (E 2 ) 2 such that a?i + X2 = 
Ui + 2/2- Then, one has x\ — y\ = y 2 - £2, where xi — yi E Si and x 2 - y 2 G E 2 . 
Thus, Lemma |3 . 1 1 implies that xi = j/i and x 2 = y 2 . This proves that all elements 
of E'j + E 2 have a unique representation as a sum xi +x 2 , where (11, a; 2 ) G E^ x E 2) 
so that 

|e' 1 + e 2 | = |e' 1 ||e 2 | = |e' 1 |(^-|e;i). 

If 2 < |Ei| < 2zl, one has |Ei + E 2 | > 2 = p - 1. In addition, since p is 

prime, one cannot have |E^ + E 2 | = lE'JlE^I — p either. Therefore, one of the two 
sets, say E' x , has cardinality 2. Then \S[\ = 1 and S\ = (rj.,— r\). Now, since A 
is regular, there is a subsequence T 2 of £ 2 such that a(S' 1 ) + cr(T 2 ) = 0. It follows 
from Lemma 13-11 that cr(S[) = r\ = 0, which is a contradiction. 

Case 2: d ^ 3 and £f =1 (|E^| ~ !) =2>- 

On the one hand, since d ^ 3 and A is regular, Lemmas 13.11 and 14.11 imply that 
Ej| < p — 1 for all i G [l,d]. On the other hand, there is k G [l,d] such that 
|E;| = \S. L \ + 1 for all i ^ k. Using Lemma [2741 we obtain that for every i =^ k, there 
exists Ti G F* such that all elements of Si are equal to ri or —r%. 

Now, for any two distinct elements Jo, jo G [l,d] with io ^ k, and any rj G Si , 
let us consider the sets E^ defined by 

E' Jo = E(5 l0 \ (r l0 )), E; o = E(S i0 U (r io )) = E J0 + {0,r lo } 

and EJ = E, otherwise. Let also Qi ,j be as in Proposition 14.31 
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Then, one has |SJ | = |S i0 | — 1. In addition, since A is regular, Lemmas 13.11 and 

imply that ±r lQ S jo . It follows from Theorem O that \T,' jo \ > |S io + 2. 
We now define (^)ie[i,d] by t io = |S io | - 2, t jo = |S io | + 1 and ^ = |Si| - 1 

otherwise. In particular, ^ |S^| — 1 < p for all i € [1, d] and X^tLi = p + 1. 
By Theorem O we have that X^=i A J (|S l | - 1) = in F p . Thus, Proposition |4~31 
implies that, up to a nonzero multiplicative constant, the coefficient of in 

Qio-Jo i s 

(2A, - A l0 ) 2 - f 2A» ~ A l + E A 'd^l - !)) 

d 

(2X1 ~ 4A ^o + 2A? ) -E A ?(I S *I - !) 

i=l 

d 

2(A J - -A io ) 2 -^Af(|S i |-l). 

i=l 

Note that X)i=i Af (|Sj| — 1) is independent of io and jo- In addition, the coefficient 
of rij=i X\ l m Qio-Jo i s zer0 ^ an( l onr y ^ 

(A io -A iD ) 2 = i^A 2 (|S,|-l). 

4=1 

Since d ^ 3, there is at least one pair (iojio) such that this equality does not hold. 
Since io and jo play symmetric roles, iq can be chosen such that io ^ k indeed. It 
follows from Theorem 12 . 1 1 that for this actual pair, Qi j cannot vanish on Yit=i 
which contradicts Proposition 14.31 

Case 3: d ^ 3 and £i=i(l s i| - 1) = p- 1. 

Since A is regular, Lemmas 13.11 and 14.11 give |Sj| < p — 1 for all i G [l,d]. It 
follows that |Sj| = \Si\ + 1 for all i G [1, d], and Lemma l2~4l implies that there exists 
Ti G F* such that all elements of S, are equal to r 4 or — r<. Note, in particular, that 
one has ±r,; ^ for any two distinct elements i,j G [1, d]. 

In addition, if one of the ratio sets, say Si, has cardinality p — 2, then d = 3 and 

1 £2 1 = I S3 1 = 1. Since A is regular, there would be a subsequence Ti of Si such 
that <t(Ti) + cr(S'2) = 0. By Lemma |3"TTI we would have cr(S2) = 0, a contradiction. 
This proves that |Sj| < p — 2 for all i G [1, d]. 

Now, for any two distinct elements ?Ojjo S [l,d] and any r i0 G S l0 such that 
|S J0 | > 1 and ±ir io ^ Sj , let us consider the sets S- defined by 

S' io = S(S lQ \ (r io )), E; o = S(S J0 U (r io )) = S io + {0,r lo } 

and S^ = Si otherwise. Let also Qi ,j be as in Proposition 14.31 

Then, one has |SJJ = |Sj | — 1. In addition, since \Sj \ > 1 and neither ±r l0 

nor ±irj are elements of Sj , it follows from Lemma \2. 51 that |S^ o | ^ |S J0 | + 3. 
We now define 0;) ie [i,d] by t i<3 = |S io | - 2, f JO = |S J0 | + 2 and t 4 = |S 4 | - 1 

otherwise. In particular, ti ^ |S£| — 1 < p for all i G [l,d] and Yl%=i ^ = P + 

Proposition 14 . 31 implies that, up to a nonzero multiplicative constant, the coefficient 
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(x>*) -(zW) 

A,(|£i| - 1) + 3A i0 - A^ - fej A?(|Ei| - 1) + 3A? - A^ 



=(2A? - 6A lo A JO + 6A? ) + 2 I £ A^l^l - 1) ) (3A io - K) 




Since J2i=i Ai(|Sj| — 1) and X^=i (1^*1 — 1) are independent of io and jo, this last 
expression is a quadratic polynomial / in Xi and A J0 . In addition, the coefficient 

°f rii=i x t in Qjo,io is zer0 ^ and onl y ^ /(Aim A J0 ) = 0. 

Case 3.1: If d ^ 5, then choose any jo £ such that |Sj | > 1. On the 

one hand, there are at most two ratios Ai such that /(Ai,A j0 ) = 0. On the other 
hand, there is at most one set Si such that ihfi £ Sj . Since c? ^ 5, the pigeonhole 
principle implies that there is at least one pair (io,jo) such that /(Aj , A J0 ) ^ and 
±irj ^ Sj . It follows from Theorem 12.11 that for this actual pair, Qi j cannot 
vanish on n»=i ^> which contradicts Proposition 14.31 

Case 3.2: If d £ {3,4} and there are at least three sets Si, such that |Sj| > 1, 
then without loss of generality, we may assume that \Si\ > 1 for each i £ {1, 2, 3}. 
In particular, p 7. Now, by Lemma |5. 41 one of the following holds. 

• If /(Ai, A 2 ) /(Ai, A 3 ) / 0, then there is j £ {2,3} such that ±±n £ S jo . 
Therefore, setting iq = 1, we have /(Aj , A J0 ) 7^ and ^ S J0 indeed. 

• If /(A 2 , Ai) /(A 3 , Ai) 7^ 0, then there is i £ {2,3} such that ±|r, ^ Si. 
Therefore, setting j = lj we have /(Aj , Aj ) 7^ and ±irj ^ Sj indeed. 

• If /(Ai, A2) /(A2, Ai) 7^ 0, then p J? 7 implies that one cannot have both 
n = ±2r2 and r 2 = ±2ri. Thus, there are two distinct elements io,jo £ 
{1,2} such that /(A, ,A J0 ) 7^ and ±5^ ^ Sj indeed. 

• If /(Ai, A2) /(A2, A3) /(A 3 , Ai) 7^ 0, then p ^ 7 implies that the three equal- 
ities 7*1 = ±2r 2 and r2 = ±2r 3 and r 3 = ±2ri can occur only when 
n = ±8rj, so that p = 7. Otherwise, there are two distinct elements 
io, jo £ {1, 2, 3} such that /(A i0 , A J0 ) 7^ and ±|rj ^ Sj g indeed. 

It follows that whenever p / 7, there is at least one pair (io,jo) such that 
f(Xi ,\j ) and ±\ri £ Sj . Theorem 12.11 then implies that for this actual 
pair, Qi j cannot vanish on ]X_ j E^, which contradicts Proposition ^. 31 

The only remaining case to consider is p — 7, d = 3 and \Si\ = 2 for each 
i £ {1,2,3}. Therefore, by relabelling if necessary, there are only two possible 
cases. 

• Si = {0,1,2}, £ 2 = {0,2,4}, S 3 = {0,4,1}, which gives Si = (1,1), 
5*2 = (2,2) and S3 — (—3,-3). It can easily be checked that such a 
sequence A satisfies dim (A) = p — 2, so that d = 1, a contradiction. 

• Si = {-1,0, 1}, £ 2 = {-2, 0, 2}, S 3 - {-3, 0, 3}, which gives Si = (-1, 1), 
S-2 = (—2,2) and S 3 = (—3,3). Therefore, by relabelling if necessary, one 
has A = (—1, 1, —2, 2, —3, 3). The following table then gives a basis of (Sa)- 
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Case 3.3: If d £ {3,4} and there are exactly two sets Si such that \Si\ > 1, 
then without loss of generality, we can suppose that these two sets are S± and S 2 , 
where |Si ^ S 2 |. Therefore Si and S2 are two arithmetic progressions such that 
Si| + IS2I = p + 3 — d. In addition, it follows from Lemma 13 . 1 1 that Si and — S2 
satisfy the hypothesis of Lemma 1531 We thus consider the following cases. 

If d= 3, thenp ^ 7 and since a(Si)+a(S2)+o'(Ss) = 0, Lemma l3Jl implies that 
<r(Si) and a(S 2 ) are nonzero. Therefore, Lemma [5.51 implies there exists r G F* 
such that Si = {0, 2, 4}.r and S 2 = { — 1, 0, 1, . . . ,p — 5}.r. On the one hand, this 
gives a (Si) + cr(S 2 ) = —2r. On the other hand, the single element of S3 has to be 
in {3,4}.r, so that a (A) / 0, a contradiction. 

If d = 4, then p ^ 11 and since a (Si) + a(S 2 ) + cr(S s ) + <r(S 4 ) = 0, Lemma 1331 
implies that either cr(Si) or <r(S 2 ) is nonzero. Therefore, Lemma 15.51 implies there 
exists r £ F* such that one of the following cases holds. 

• Si = {0,2,4}.r and S 2 = {0, 1, . . . ,p - 5}.r. Then, a(Si) + <r(S 2 ) = -r 
and the elements of S3 and S4 have to be in {3,4}.r. Therefore, one has 
a(A) 7^ 0, which is a contradiction. 

• Si = {0, 2, 4}.r and S 2 = {-1, 0,1,... ,p-6}.r. Then, a(Si)+a(S 2 ) = -3r 
and the elements of S3 and S4 have to be in {3, 4, 5}.r. Therefore, one has 
<j(A) ^ 0, which is a contradiction. 

• Si = {0,2,4,6}.r and S 2 = {-1, 0, 1, . . . ,p - 7}.r. Then, a (Si) +cr(5 2 ) = 
— 2r and the elements of S3 and S4 have to be in {3, 4}.r when p = 11, and 
in {3, 4, 5, 6}.r whenever p ^ 13. In all cases, one has cr(A) ^ 0, which is a 
contradiction. 

• Si = {0,3,6}.r and S 2 = {-2, -1, 0, . . . ,p - 7}.r. Then, a(Si) + a(S 2 ) = 
— 3r and the elements of S3 and S4 have to be in {4, 6}. r when p — 11, and 
in {4, 5,6}.r whenever p ^ 13. In all cases, one has a(A) ^ 0, which is a 
contradiction. 

• Si = {^^,0,^}.r and S 2 = {_£=»,... ,_l,o, 1, Z^}.r Then, 
a(Si)+a(S 2 ) = — 2r and the elements of S3 and S4 have to be in j 2 ^, ^j^j-.r 
Therefore, one has a (A) ^ 0, which is a contradiction. 

• p = 11, Si = {-4,0,4,8}.r and S 2 = {-2, -1, 0, 1, 2, 3}.r. Then, the 
elements of S3 and S4 have to be in {— 5,5}.r, which would contradict 
Lemma 13.11 

Case 3.4: If d € {3,4} and there is only one set Sj such that |Sj| > 1, then 
without loss of generality, we can suppose that this set is Si. If d — 3, and since A 
is regular, there is a subsequence Ti of Si such that <j(T{) + <r(S 2 ) = 0. It follows 
from Lemma 13. II that <r(S 2 ) = 0, which is a contradiction. Thus, d — 4 and Lemma 
13. II implies that, by relabelling if necessary, there exist t £ [0,p — 4] and r £ F* such 
that 

Si = {-(p-4-i),...,-l,0,l,...,i}.r, 

S 2 = {0, -(t + l)}.r, S 3 = {0, -(t + 2)}.r, S 4 = {0, -(t + 3)}.r. 

Since t S [0,p — 4], one has <t(j4) = — (t + 2)r ^ 0, which contradicts the fact that 
A is a zero-sum sequence. □ 
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Proof of Corollary \1.8[ Let A, B be two sequences of p — 1 nonzero elements in F p . 
It is easily checked that Sa = Sb whenever A and B are colinear, or have one of 
the forms given in (i), (ii) and (Hi). Reciprocally, suppose that A, B are such that 
Sa = Sb- If cr(A) ^ then Lemma T5. 2 1 and Corollary 11.51 imply that A and B are 
colinear. If a (A) = then, using Theorem 11.71 there are six cases to consider. 

• If dim(A) = p — 2 then Sa C Sb already implies that A and B are colinear. 

• If dim(A) = 1, then dim(-B) = 1 and it is easily seen that there exist A, r £ F* 
such that A (resp. B) consists of p — 2 copies of r (resp. Ar) and one copy of 2r 
(resp. 2Ar). Therefore, A and B either are colinear or have the form given in (i). 

• If p = 7 and, by relabelling if necessary, one has 

A= (-1,1,-2,2,-3,3), 
then it can be checked by hand that Sa = Sb if and only there is A £ F* such that 
B = (-A, A, -2A, 2A, — 3A, 3A) or B = (-A, A, 3A, — 3A, 2A, -2A). 

Therefore, A and B either are colinear or have the form given in (Hi). 

• If dim(A) = p — 3 and there exist t e [l,p — 4], r € ¥* such that, by relabelling 
if necessary, one has 

A = (r,...,r, -r,...,-r , -(* + l)r, -(f + 2)r), 

t p-3-t 

then 5a C Sb implies that 

B = (Ar, . . . , Ar, -Ar, -Ar , -ft + l)Ar + rf, -(t + 2)Ar - ri) 

t p-3— i 

for some A e F* and d G F p . By Theorem 11.71 the equality dim(S) = p — 3 holds 
only when <i = 0, that is A and £? are colinear, or d = — Ar, which gives case (ii). 

• If dim(A) = p — 3 and there exist t E [0,p — 6], r e F* such that, by relabelling 
if necessary, one has 

A = (r,. r, r r,. -r , 2r, -(t + 3)r, -(* + 3)r), 

t p-A—t 

then Sa C\ Sb implies that 

B = (Ar, . . . , Ar, -Ar, . . . , - Ar , 2Ar, -(t + 3)Ar + d, -(t + 3)Ar - d) 
t p-4-t 

for some A e F* and d 6 F p . By Theorem 11.71 the equality dim(£>) = p — 3 holds 
only when d = 0, that is A and _B are colinear. 

• If dim(A) = p — 4, then there exist r £ F* such that, by relabelling if necessary, 
one has 

A = (r, . . . , r, — r, 2r, 2r, 2r). 

p— 5 

Now, either one has p — b, which brings us back to the case dim(A) = 1, or p ^ 7 
and iSa C 5b implies that 

B = (Ar, . . . , Ar, -Ar, 2Ar + a, 2Ar + b, 2Ar - (a + 6)) 

p— 5 

for some A £ F* and a, 6 £ F p . Then, by Theorem 1 1.71 the equality dim(i?) = p — 4 
holds only when a = b = 0, so that A and B are colinear. □ 
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Proof of Corollary \1.9[ Let A be a sequence of p — 1 nonzero elements in ¥ p not 
being of the forms given in (i) and (ii). If cr(A) ^ 0, then Lemma 1 5. II and Theorem 
11.41 readily imply that dim(v4) ^ p — 3. Then, the desired result follows directly 
from Proposition 13.31 If a (A) = then, using Theorem 11.71 there are only two 
cases to consider. If dim(A) ^ p — 3, then Proposition 13.31 implies that the number 
of minimal elements in 5,4 is at least p — 3. If dim(^4) = p — 4, then there exist 
r G ¥* such that A consists of p — 5 copies of r, one copy of — r and three copies of 
2r. Now, either one has p — 5 and A has the form given in (ii), or p ^ 7 and the 
number of minimal elements in Sa is 2(p — 5) p — 3. □ 

6. A CONCLUDING REMARK 

Let p be a prime and let A = (a± , . . . , at) be a sequence of I ^ 1 nonzero elements 
in F p . In this paper, we proved that for every I ^ p— 1, the equality dim(yl) = 1 
holds except for a very limited number of exceptional sequences which can be fully 
determined. However, our results can easily be extended to the affine setting. 

Given any element a G F p , let be the set of all 0-1 solutions to the equation 

a\X\ + • • • + a£Xf — a, 

and let 

dim(yl, a) = dim(aff (S%)) 
be the dimension of the affine hull of 5^. 

For any / C [1, £} , we consider the sequence Ai — (a[ , . . . , a' e ) defined by a\ = —a.; 
if i G / and a\ = ai otherwise. Whenever £ ^ p — 1, the following lemma shows that 
there is an affine transformation mapping 5^ onto Saj, for a particular / C [1,^]. 
Therefore, our results provide a full description of the dimension and structure of 
the sets S% for all a G F p . 

Lemma 6.1. Let p be a prime and let A = (ai, . . . , ai) be a sequence of £ ^ p — 1 
nonzero elements in ¥ p . Then, for every a G ¥ p , there exists I C [1,^] such that 

dim(A,a) = dim(A/). 

Proof. By Cauchy-Davenport Theorem, one has ^ min{p, £+ 1} = p. Thus, 

there exists / C [1,£] such that J2 ieI ai = a. Now, let A[ — (a[, . . . , a' e ). Then, for 
every J C [1,^], one has 

eg = a 

if and only if 

which is equivalent to 

that is to say 

E «i = o- 

Therefore, is the image of 5^ by the affine transformation (xj. , . . . , a;^) H> 
(j/i, . . . y^), where yi = 1 — Xi if i G / and y; = otherwise. □ 
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